IT, Cloud & DevOps Blog

Ubuntu 16.04 — flightgear — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — flightgear — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4588-1 Related CVEs: CVE-2016-9956 Upstream summary: It was discovered that FlightGear could write arbitrary files if received a special nasal script. A remote attacker could exploit this with a crafted […]

Read more
IBM AIX 7.2 — CVE-2009-2434 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2009-2434 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 27 March 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2009-2434, IBM Support Bulletin CVE: CVE-2009-2434 NVD summary: Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. References: secunia.com/advisories/35754   securitytracker.com/id?1022530   […]

Read more
Ubuntu 16.04 — jbigkit — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — jbigkit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5742-1 Related CVEs: CVE-2017-9937 Upstream summary: It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into opening […]

Read more
Ubuntu 14.04 — libgit2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libgit2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4798-1 Related CVEs: CVE-2016-8568 CVE-2016-8569 Upstream summary: It was discovered that libgit2 mishandled certain malformed git objects. A remote attacker could use this vulnerability to cause a denial of service. […]

Read more
IBM AIX 7.2 — CVE-2002-1041 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2002-1041 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 24 March 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2002-1041, IBM PSIRT advisory page CVE: CVE-2002-1041 NVD summary: Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames. References: archives.neohapsis.com/archives/aix/2002-q3/0000   archives.neohapsis.com/archives/aix/2002-q3/0000 Table of contents […]

Read more
CHAT